+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
O/S Deployment Thread, Currently Image Non-Encypted Laptops with Ghost. Need Advice for Encrypting Them in Technical; Hi We have about 700 laptops that we image and maintain with USB Drives running Ghost. We have our laptops ...
  1. #1

    Join Date
    Feb 2014
    Posts
    7
    Thank Post
    9
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Currently Image Non-Encypted Laptops with Ghost. Need Advice for Encrypting Them

    Hi
    We have about 700 laptops that we image and maintain with USB Drives running Ghost.

    We have our laptops with a C: (Operating System / Program Files) and D: (My Documents, Pictures, Desktop etc).
    The D: is more important to be encrypted (for us) than the C:, but if it could work easily, encrypting both, then that is also fine.

    When we re-image a laptop because of a significant update / fix / crash etc, we just re-image the C partition. This allows us to wipe a system without needing to worry about the work stored on the D drive.

    This works perfect for us and with encryption in the pipeline, we would like to keep it as simple and similar as possible.

    What version of Ghost should we be running that would allow encryption?
    What encryption software could Ghost allow to be written over?
    Any general advice about encryption from people that have done a similar thing would be appreciated.
    If Ghost, cannot handle encryption? What system do you recommend for imaging from local storage (not across a LAN).

    Thank you

    EDIT: Deployed OS is Windows 7 Professional 64bit.
    Last edited by JF10; 13th March 2014 at 10:14 AM.

  2. #2

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,341
    Thank Post
    624
    Thanked 1,584 Times in 1,421 Posts
    Rep Power
    414
    What OS do you deploy to them?

    Ben

  3. Thanks to plexer from:

    JF10 (13th March 2014)

  4. #3

    Join Date
    Feb 2014
    Posts
    7
    Thank Post
    9
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi Ben,
    At the moment Windows 7 Professional - 64bit.

  5. #4

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,060
    Thank Post
    853
    Thanked 2,674 Times in 2,269 Posts
    Blog Entries
    9
    Rep Power
    768
    What version of Windows and what kind of laptops, TPM?

    If you have Vista, 7 Pro or 8 Enterpise then just use bitlocker, configurable via GPO but may need a bios tweak (which can be pushed remotely to come laptops( to enable the TPM and the OS to take ownership.

    SCCM, Windows 7 and Bitlocker - Part 1 - Blogs - EduGeek.net

    Encryption happens in the background after the image. Way faster on 8 to.
    Last edited by SYNACK; 13th March 2014 at 10:15 AM.

  6. Thanks to SYNACK from:

    JF10 (13th March 2014)

  7. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,060
    Thank Post
    853
    Thanked 2,674 Times in 2,269 Posts
    Blog Entries
    9
    Rep Power
    768
    Looks like Bitlocker may work for you.

  8. Thanks to SYNACK from:

    JF10 (13th March 2014)

  9. #6

    Join Date
    Feb 2014
    Posts
    7
    Thank Post
    9
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks Synack
    Hypothetically,
    I image with an unencrypted Windows 7 Professional image. Enable Bitlocker, encrypts data. 6 months later, C drive corrupts and cannot 'turn off' bitlocker. We want to re-image the C: with the unencrypted image over the top of the encrypted C: partition.
    Should this scenario work?
    Last edited by JF10; 13th March 2014 at 10:21 AM.

  10. #7

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,060
    Thank Post
    853
    Thanked 2,674 Times in 2,269 Posts
    Blog Entries
    9
    Rep Power
    768
    Quote Originally Posted by JF10 View Post
    Thanks Synack
    Hypothetically,
    I image with an unencrypted Windows 7 Professional image. Enable Bitlocker, encrypts data. 6 months later, C drive corrupts and cannot 'turn off' bitlocker. We want to re-image the C: with the unencrypted image over the top of the encrypted drive.
    Should this scenario work?
    Yes, there would be a recovery key stored in AD and if it (the partition) was toast just dump a new image on and reinitialize the TPM, easy .

  11. Thanks to SYNACK from:

    JF10 (13th March 2014)

  12. #8

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,824
    Thank Post
    875
    Thanked 1,675 Times in 1,458 Posts
    Blog Entries
    12
    Rep Power
    444
    Quote Originally Posted by JF10 View Post
    Thanks Synack
    Hypothetically,
    I image with an unencrypted Windows 7 Professional image. Enable Bitlocker, encrypts data. 6 months later, C drive corrupts and cannot 'turn off' bitlocker. We want to re-image the C: with the unencrypted image over the top of the encrypted C: partition.
    Should this scenario work?
    That will work.

    But Bit Locker isn't included With Windows 7 Pro. Only Enterprise and Ultimate. - http://technet.microsoft.com/en-us/l...spx#BKMK_Vista
    Last edited by FN-GM; 13th March 2014 at 10:26 AM.

  13. Thanks to FN-GM from:

    JF10 (13th March 2014)

  14. #9
    MordyT's Avatar
    Join Date
    Sep 2012
    Location
    In a computer
    Posts
    421
    Thank Post
    43
    Thanked 66 Times in 61 Posts
    Rep Power
    18
    Quote Originally Posted by SYNACK View Post
    What version of Windows and what kind of laptops, TPM?

    If you have Vista, 7 Pro or 8 Enterpise then just use bitlocker, configurable via GPO but may need a bios tweak (which can be pushed remotely to come laptops( to enable the TPM and the OS to take ownership.

    SCCM, Windows 7 and Bitlocker - Part 1 - Blogs - EduGeek.net

    Encryption happens in the background after the image. Way faster on 8 to.
    Since when did Bitlocker work on Windows 7 Pro? Enterprise and Ultimate only I thought?
    Quote Originally Posted by JF10 View Post
    Thanks Synack
    Hypothetically,
    I image with an unencrypted Windows 7 Professional image. Enable Bitlocker, encrypts data. 6 months later, C drive corrupts and cannot 'turn off' bitlocker. We want to re-image the C: with the unencrypted image over the top of the encrypted C: partition.
    Should this scenario work?
    About 90% Yes. Bitlocker usually does software based encryption, which means you can reformat and its gone. Unless you have hardware encryptable drives...

  15. Thanks to MordyT from:

    JF10 (13th March 2014)

  16. #10

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,060
    Thank Post
    853
    Thanked 2,674 Times in 2,269 Posts
    Blog Entries
    9
    Rep Power
    768
    Quote Originally Posted by FN-GM View Post
    That will work.

    But Bit Locker isn't included With Windows 7 Pro. Only Enterprise and Ultimate. - BitLocker Drive Encryption in Windows 7: Frequently Asked Questions
    Oops was thinking of Vista where I think pro did it.

    Do you have VL, should have access and be using enterprise anyway so easy enough as you reimage as stuff breaks.

  17. Thanks to SYNACK from:

    JF10 (13th March 2014)

  18. #11

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,824
    Thank Post
    875
    Thanked 1,675 Times in 1,458 Posts
    Blog Entries
    12
    Rep Power
    444
    Do you have VL, should have access and be using enterprise anyway so easy enough as you reimage as stuff breaks.
    You only get Enterprise if you have purchased Software Assurance.

    Oops was thinking of Vista where I think pro did it.
    It was only Enterprise and Ultimate for Vista as well

  19. Thanks to FN-GM from:

    JF10 (13th March 2014)

  20. #12

    Join Date
    Feb 2014
    Posts
    7
    Thank Post
    9
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by SYNACK View Post
    Oops was thinking of Vista where I think pro did it.

    Do you have VL, should have access and be using enterprise anyway so easy enough as you reimage as stuff breaks.
    We do have Microsoft Schools Agreement, but I am not sure whether we are entitled to Enterprise? Yes, it wouldn't be a big project we set out to do in a half term. It would just be a case of rolling it out as and when a laptop required a re-image.

  21. #13
    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,237
    Thank Post
    50
    Thanked 273 Times in 211 Posts
    Blog Entries
    6
    Rep Power
    113
    Quote Originally Posted by MordyT View Post
    Since when did Bitlocker work on Windows 7 Pro? Enterprise and Ultimate only I thought?
    I'm fairly sure that Windows 7 Pro will let you encrypt USB sticks with Bitlocker, it won't encrypt system drives for you though.

  22. #14

    Join Date
    Feb 2014
    Posts
    7
    Thank Post
    9
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by Norphy View Post
    I'm fairly sure that Windows 7 Pro will let you encrypt USB sticks with Bitlocker, it won't encrypt system drives for you though.
    What about a non-system partition?

  23. #15
    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,237
    Thank Post
    50
    Thanked 273 Times in 211 Posts
    Blog Entries
    6
    Rep Power
    113
    I don't know, I've not tried. I think though that it'll only do removable drives.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 62
    Last Post: 20th September 2013, 11:50 AM
  2. Replies: 1
    Last Post: 17th July 2013, 10:48 AM
  3. Replies: 7
    Last Post: 11th May 2010, 10:50 PM
  4. Problems with ghost imaging
    By jayrock in forum Windows
    Replies: 15
    Last Post: 27th January 2010, 08:48 PM
  5. Ghosting a non networked laptop?
    By reggiep in forum How do you do....it?
    Replies: 27
    Last Post: 26th June 2008, 08:08 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •